Lucene search
+L

6 matches found

NVD
NVD
•added 2024/06/13 2:15 p.m.•30 views

CVE-2024-36647

A stored cross-site scripting XSS vulnerability in Church CRM v5.8.0 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Family Name parameter under the Register a New Family page...

5.4CVSS0.00259EPSS
SaveExploits1References1
Vulnrichment
Vulnrichment
•added 2024/06/13 12:00 a.m.•18 views

CVE-2024-36647

A stored cross-site scripting XSS vulnerability in Church CRM v5.8.0 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Family Name parameter under the Register a New Family page...

5.6AI score0.00259EPSS
SaveExploits1References1
Cvelist
Cvelist
•added 2024/06/13 12:00 a.m.•34 views

CVE-2024-36647

A stored cross-site scripting XSS vulnerability in Church CRM v5.8.0 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Family Name parameter under the Register a New Family page...

0.00259EPSS
SaveExploits1References1
CVE
CVE
•added 2024/06/13 12:00 a.m.•68 views

CVE-2024-36647

Church CRM version 5.8.0 is susceptible to a stored cross-site scripting (XSS) vulnerability. An attacker can execute arbitrary web scripts or HTML by injecting a crafted payload into the Family Name parameter on the Register a New Family page. To remediate this, users should update to a version ...

5.4CVSS5.6AI score0.00259EPSS
SaveExploits1References1Affected Software1
Mend
Mend
•added 2024/06/13 12:00 a.m.•3 views

CVE-2024-36647

A stored cross-site scripting XSS vulnerability in Church CRM v5.8.0 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Family Name parameter under the Register a New Family page...

5.4CVSS0.00259EPSS
SaveExploits1References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/06/13 12:00 a.m.•8 views

CVE-2024-36647: Improper Neutralization of Input During Web Page Generation

A stored cross-site scripting XSS vulnerability in Church CRM v5.8.0 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Family Name parameter under the Register a New Family page...

5.4CVSS6.1AI score0.00259EPSS
SaveExploits1References1
Rows per page
Query Builder